Lucene search
+L

12827 matches found

BDU FSTEC
BDU FSTEC
added 2023/12/15 12:0 a.m.11 views

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages lies in the insufficient protection of sensitive data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by opening a specially create...

7.8CVSS7.5AI score0.17697EPSS
SaveExploits1References4
OSV
OSV
added 2023/12/14 10:15 p.m.4 views

DEBIAN-CVE-2023-49343

Temporary data passed between application components by Budgie Extras Dropby applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false...

7.8CVSS7.3AI score0.00303EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/13 10:15 a.m.3 views

CVE-2023-47074

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...

7.8CVSS5.9AI score0.00421EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/13 10:15 a.m.20 views

CVE-2023-47074

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...

7.8CVSS0.00421EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/13 10:15 a.m.20 views

Design/Logic Flaw

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...

4.4CVSS6.9AI score0.00421EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/13 9:30 a.m.31 views

CVE-2023-47074 ZDI-CAN-21812: Adobe Illustrator JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...

7.8CVSS7.7AI score0.00421EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/12/13 9:30 a.m.29 views

CVE-2023-47074 ZDI-CAN-21812: Adobe Illustrator JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...

7.8CVSS6.6AI score0.00421EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/13 12:30 a.m.9 views

GHSA-7J69-QFC3-2FQ9 Ansible template injection vulnerability

A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data...

6.6CVSS6.8AI score0.00544EPSS
SaveExploits0References9
OSV
OSV
added 2023/12/12 10:15 p.m.21 views

AZL-32158 CVE-2023-5764 affecting package ansible for versions less than 2.14.12-2

A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data...

7.8CVSS6.9AI score0.00544EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/12 10:15 p.m.16 views

CVE-2023-5764

A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data...

7.8CVSS0.00544EPSS
SaveExploits0References5
OSV
OSV
added 2023/12/12 10:1 p.m.6 views

CVE-2023-5764 Ansible: template injection

A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data...

7.1CVSS6.8AI score
SaveExploits0References8
Cvelist
Cvelist
added 2023/12/12 10:1 p.m.24 views

CVE-2023-5764 Ansible: template injection

A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data...

7.1CVSS7.8AI score0.00544EPSS
SaveExploits0References3
OSV
OSV
added 2023/12/12 1:15 a.m.6 views

CVE-2023-42910

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution...

8.8CVSS6AI score0.00945EPSS
SaveExploits0References3
NVD
NVD
added 2023/12/12 1:15 a.m.21 views

CVE-2023-42901

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution...

7.8CVSS0.00311EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/12/12 12:27 a.m.27 views

CVE-2023-42911

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution...

8.5AI score0.00311EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/12/12 12:27 a.m.0 views

CVE-2023-42906

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution...

7.6AI score0.00758EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/12/12 12:0 a.m.9 views

PT-2023-8548 · Adobe · Substance3D - Designer

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Designer versions 13.0.0 and earlier Adobe Substance 3D Designer versions 13.1.0 and earlier Description: The issue is related to an out-of-bounds read vulnerability in the Adobe Substance 3D Designer program. This...

5.5CVSS5.2AI score0.00319EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2023/12/12 12:0 a.m.11 views

The vulnerability of the FRRouting software implementation for networking routing on Unix-like systems lies in its uncontrolled resource consumption, which allows a hacker to cause service interruptions.

The vulnerability of the FRRouting software implementation for Unix-like systems is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially created file...

5.9CVSS6.8AI score0.00785EPSS
SaveExploits0References9Affected Software6
Positive Technologies
Positive Technologies
added 2023/12/12 12:0 a.m.6 views

PT-2023-8546 · Adobe · Substance3D - Sampler

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Sampler versions 4.2.1 and earlier Description: The issue is related to an out-of-bounds write vulnerability in memory. Exploitation of this issue could allow an attacker to execute arbitrary code with the help of a special...

7.8CVSS7.7AI score0.00329EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2023/12/12 12:0 a.m.7 views

PT-2023-8544 · Adobe · Substance3D - Sampler

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Sampler versions 4.2.1 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

7.8CVSS7.8AI score0.00308EPSS
SaveExploits0References9
Rows per page
Query Builder